rpms/libtasn1
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import UBI libtasn1-4.16.0-10.el9_8

Browse Source
This commit is contained in:
AlmaLinux RelEng Bot 2026-06-24 19:09:52 -04:00
parent 4148a5b2c9
commit 992383db22
2 changed files with 32 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
SOURCES/libtasn1-4.16-cve-2025-13151-stack-buffer-overflow.patch Normal file
View File

@ -0,0 +1,26 @@
From adf39da39aceabe8b77e4b4fe284d6b8a710ea8c Mon Sep 17 00:00:00 2001
From: Vijay Sarvepalli <vssarvepalli@cert.org>
Date: Mon, 22 Dec 2025 12:24:27 -0500
Subject: [PATCH] Fix for CVE-2025-13151 Buffer overflow
Signed-off-by: Simon Josefsson <simon@josefsson.org>
---
lib/decoding.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/lib/decoding.c b/lib/decoding.c
index ff04eb7..0ef47dc 100644
--- a/lib/decoding.c
+++ b/lib/decoding.c
@@ -1968,7 +1968,7 @@ int
asn1_expand_octet_string (asn1_node_const definitions, asn1_node * element,
const char *octetName, const char *objectName)
{
- char name[2 * ASN1_MAX_NAME_SIZE + 1], value[ASN1_MAX_NAME_SIZE];
+ char name[2 * ASN1_MAX_NAME_SIZE + 2], value[ASN1_MAX_NAME_SIZE];
int retCode = ASN1_SUCCESS, result;
int len, len2, len3;
asn1_node_const p2;
--
2.54.0

7
SPECS/libtasn1.spec
View File

@ -1,7 +1,7 @@
Summary: The ASN.1 library used in GNUTLS
Name: libtasn1
Version: 4.16.0
Release: 9%{?dist}
Release: 10%{?dist}
# The libtasn1 library is LGPLv2+, utilities are GPLv3+
License: GPLv3+ and LGPLv2+
@ -13,6 +13,7 @@ Patch1: libtasn1-3.4-rpath.patch
Patch200: libtasn1-4.16-coverity.patch
Patch300: libtasn1-4.19-CVE-2021-46848.patch
Patch301: libtasn1-4.20-CVE-2024-12133.patch
Patch302: libtasn1-4.16-cve-2025-13151-stack-buffer-overflow.patch
BuildRequires: gnupg2
BuildRequires: gcc
@ -61,6 +62,7 @@ gpgv2 --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0}
%patch200 -p1 -b .coverity
%patch300 -p1 -b .CVE-2021-46848
%patch301 -p1 -b .CVE-2024-12133
%patch302 -p1 -b .cve-2025-13151-stack-buffer-overflow
%build
autoreconf -v -f --install
@ -99,6 +101,9 @@ make check
%changelog
* Mon Jun 01 2026 Daiki Ueno <dueno@redhat.com> - 4.16.0-10
- Backport the fix for CVE-2025-13151 (RHEL-139568)
* Wed Feb 12 2025 Alexander Sosedkin <asosedki@redhat.com> - 4.16.0-9
- Backport the fix for CVE-2024-12133 (RHEL-78580)